CSIDB logo
Incident

Governor Juan F. Luis Hospital & Medical Center

Incident posture

Attack window
Apr 2025
Location
United States of America
Status
Unknown
CIA posture
Available to members
Updated
2026-04-06 09:57

Linked entities

Victim
Governor Juan F. Luis Hospital & Medical Center
Threat actors
0 actors
Sources
1 source

Timeline

Occurred
Apr 2025
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

Governor Juan F. Luis Hospital & Medical Center reported a cybersecurity breach affecting its computer networks, prompting an investigation and risk mitigation measures while maintaining that clinical services remained uninterrupted. The incident follows a similar ransomware attack on the Virgin Islands Lottery, which refused a ransom demand and rebuilt its systems.

Motives

Detailed motive labels are available to members.

1 motive

TTPs

Detailed technique labels are available to members.

1 technique

Description

Governor Albert Bryan Jr. publicly addressed ongoing issues at Governor Juan F. Luis Hospital & Medical Center during a press briefing on Tuesday, highlighting a cybersecurity threat affecting the facility. He remarked that the hospital was under another crisis as they spoke, referencing ransomware. The hospital announced a recent data security incident, stating it had detected a breach affecting its computer networks on Sunday. Upon discovering the incident, the hospital launched a detailed investigation and implemented measures designed to mitigate any associated risks. These actions were communicated in a statement posted on the hospital’s official Facebook page.

The cybersecurity issue at JFL followed closely on the heels of a ransomware attack affecting the Virgin Islands Lottery (VIL), a local government agency. VIL announced it would reopen on April 29 after several weeks of operational disruptions due to the cyberattack that compromised its entire network. Hackers demanded a ransom of $1 million, which was explicitly refused by VIL Director Raymond Williams. Instead, Williams authorized a comprehensive rebuild of the lottery's systems from scratch. VIL has since resumed operations, honoring tickets for draw number 1047 and prior winning tickets dating back 180 days.

Despite the cybersecurity incident, JFL reassured the community that clinical services have not been disrupted. Both inpatient and outpatient services remain fully operational, allowing uninterrupted healthcare provision to the community. In addressing public concerns, JFL stressed its ongoing commitment to data security and privacy. The hospital stated that the privacy and security of the personal information it maintains is of the utmost importance. JFL promised to provide additional updates as more details about the cybersecurity breach become available.

Sources

Sources available to members: 1 source.

CSIDB